About the role
structured by ORIThis role holder will be a key person in the Security Operations team, providing cyber intelligence to internal stakeholders that is insightful, contextual, and actionable strengthening KPMG UKs defences against current and emerging threats. The role holder will be pro-active and thorough in the production of…
What you will do
- Communicate threat intelligence to relevant stakeholders to support evidence-based decision making in a variety of formats including verbally to wide audiences.
- Produce clear and concise threat intelligence reports at tactical, operational, and strategic levels with good analytical capability and excellent writing and reporting skills.
- Utilising threat intelligence tooling and open-source tools to conduct investigations into threat actors, infrastructure and tactics, techniques, and procedures.
- Support the firm’s mission to build client trust and confidence about information security generally and threat intelligence specifically .
- Stay abreast of industry best practice in relation to threat intelligence .
What they are looking for
- Prior cyber threat intelligence experience with understanding of threat actors’ tactics, techniques and procedures against MITRE frameworks and the Cyber Kill Chain.
- Experience with threat intelligence platforms and tools, including threat feeds, threat intelligence platforms and SIEMs.
- Solid understanding of information security standards (e.g., Cyber Essentials, ISF Standard of Good Practice for Information Security, ISO 27001, NIST Cybersecurity Framework, CIS Top 20 Controls).
- Understanding of security threats, attack scenarios, intrusion detection and incident management.
- Already holds or can be SC cleared.
Nice to have
- CREST Registered Threat Intelligence Analyst certification (CRTIA) or GIAC Cyber Threat Intelligence (GCTI)
- Relevant cyber and certifications
Full posting text
This role holder will be a key person in the Security Operations team, providing cyber intelligence to internal stakeholders that is insightful, contextual, and actionable strengthening KPMG UKs defences against current and emerging threats. The role holder will be pro-active and thorough in the production of intelligence to stakeholders and have the responsibility for the development and delivery of tactical, operational, and strategic threat intelligence.
Communicate threat intelligence to relevant stakeholders to support evidence-based decision making in a variety of formats including verbally to wide audiences.
Produce clear and concise threat intelligence reports at tactical, operational, and strategic levels with good analytical capability and excellent writing and reporting skills.
Utilising threat intelligence tooling and open-source tools to conduct investigations into threat actors, infrastructure and tactics, techniques, and procedures.
Support the firm’s mission to build client trust and confidence about information security generally and threat intelligence specifically .
S tay abreast of industry best practice in relation to threat intelligence .
Identify trends, potential new technologies, and emerging threats, which may impact KPMG.
Assist in continuous review of requirements to direct the production of threat intelligence, including the selection of information sources (both internal and external to the firm).
Staying abreast of the geo-political landscape and how it may affect the cyber domain or KPMG UK.
Key Attributes
Strong verbal and written communication skills and the ability to communicate security and risk related concepts to technical and non-technical audiences.
Experience with improving the development of intelligence in an organisation from direction to dissemination and feedback.
Ability to work independently with minimal guidance and as a team with strong collaboration skills with a growth mindset on improving and building services.
Pro-active in analysing and collecting information to produce into actionable intelligence.
Strong analytical and critical thinking skills.
Essential Skills and Experience
Prior cyber threat intelligence experience with understanding of threat actors’ tactics, techniques and procedures against MITRE frameworks and the Cyber Kill Chain.
Experience with threat intelligence platforms and tools, including threat feeds, threat intelligence platforms and SIEMs.
Solid understanding of information security standards (e.g., Cyber Essentials, ISF Standard of Good Practice for Information Security, ISO 27001, NIST Cybersecurity Framework, CIS Top 20 Controls).
Understanding of security threats, attack scenarios, intrusion detection and incident management.
Already holds or can be SC cleared.
Desirable Skills and Experience
CREST Registered Threat Intelligence Analyst certification (CRTIA) or GIAC Cyber Threat Intelligence (GCTI)
Relevant cyber and certifications